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( TS//SI//NF) Introduction 

U.S. as World 's Telecommunications Backbone 
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• Much of the world’s 
communications flow 
through the U.S. 




• A target’s phone call, e-mail 
or chat will take the 
cheapest path, not the 
physically most direct 
path - you can’t always 
predict the path. 



Your target’s 
communications could 
easily be flowing into and 
through the U.S. 





International Internet Regional Bandwidth Capacity in 20 1 1 

Source: Telegeography Research 
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(TS//SI//NF) FAA702 Operations 

Two Types of Collection 
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Upstream 




You 
Should 
Use Both 



Collection directly from the servers of these U.S. 
Service Providers: Microsoft, Yahoo, Google 
Facebook, PalTalk, AOL, Skype, YouTube 
Apple. 



Collection of communications on fiber cables 
and infrastructure as data flows past. 

(FAIRVIEW, STORMBREW, BLARNEY, 

' OAKST/ 



PRISM 
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(TS//SI//NF) FAA702 Operations 

Why Use Both: PRISM vs. Upstream 





PRISM 


Upstream 


DNI Selectors 


9 U.S. based service 
providers 


Worldwide 

sources 


DNR Selectors 

Access to Stored 
Communications 
(Search) 


Coming soon 
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Worldwide 

sources 
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Real-Time Collection 
(Surveillance) 

“Abouts” Collection 
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Voice Collection 


Voice over IP 


v" 


Direct Relationship with 
Comms Providers 


^^Only through FBI 
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(TS//SI//NF) 



PRISM Collection Details 



Current Providers 



Microsoft (Hotmail, etc.) 

Google 

Yahoo! 

Facebook 
PalTalk 
YouTube 
Skype 
AOL 
Apple 



What Will You Receive in Collection 
(Surveillance and Stored Comms)? 
It varies by provider. In general: 




E-mail 

Chat - video, voice 

Videos 

Photos 

Stored data 

VoIP 

File transfers 
Video Conferencing 

Notifications of target activity - logins, etc. 
Online Social Networking details 

Special Requests 



Complete list and details on PRISM web page: 
Go PRISMFAA 
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(ts//si//nf) Dates When PRISM Collection 
Began For Each Provider 





Apple 

(added 

Oct 

--2012L 



AOL 

3/31/11 



Skype 

2 / 6/11 



YouTube 

9/24/10 



PalTalk 

12/7/09 



Google 

1/14/09 



6/3/09 



Yahoo 

3/12/08 



Microsoft 

9/11/07 



PRISM Program Cost: 
$20M per year 



2007 2008 2009 2010 2011 2012 2013 
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(TS//SI//NF) FAA702 Reporting Highlight 
PRISM and STORMBREW Combine 
To 



SAME-DAY NTOC/FBI COLLABORATION 

PREVENTS 150GB EXFIL EVENT FROM CLEARED DEFENSE CONTRACTOR (CDC) 




2012 




U.S. CDC 



The victim performed co 
EXFILTRATION on the 




4TOC TIPS FBI TO 
IMMINENT THREAT 

2 NTOC tips the 
FBI to the 
activity 



ns on the infectt 
OC DISCOVE 





The FBI contacts the 
CDC and works with 
them to clean the 
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(TS//S1//NF) 



PRISM Tasking Process 



Target Analyst inputs selectors into 
Unified Targeting Tool (UTT) 

Surveillance l l ^ Pending Stored Comms 




S2 FAA Adjudicators in Each Product Line 

Targeting Review/Validation 




Special FISA Oversight and Processing 
(SV4) 

Stored Comms Review /Validation 




Surveillance ► , 


r 






r ◄ Pending Stored Comms 




Targeting and Mission Management (S343) 

Final Targeting Review and Release 
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Unified Targeting Tool (UTT) 
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(TS//SI//NF) PRISM Collection Dataflow 
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DNI Content, Videos 
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PRISM Case Notations 
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REPRISMFISA TIPS 
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REPRISMFISA ft COUNTERTERRORISM 
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20l3-Apr-03 13 i10j28Z 

ick on the PRISM icon first 



{from the inttia I we 

PRISM ENTRIES 



& 

DOJHSA 



Last Load on Apr OS. 2013 at 12:22 PM GMT 

Check the total record 

QUICK LINKS I 




link 



• See Entire U$t (Curort and Expired) 

• See NSA List 

• See New Records 

• Ownership Court 

If the total count is much less than this, 
REPRISMFISA is having issue*. E MAIL 

' : 




SEARCH 

The search form below can be used as a filter to see a partial lest of 
records. 

Seardiftf: 



Cano 0or 



[xpffjtion diyi 
i* ficnttto*} 

HRei 1 



Prism Current Entries 

P* 9 « < of 2354 > » Rxordtporpogo: M) v 
Click on column headers to sort, * - column it not portable. 
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